$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft File: j6qb2dr2dE3JnQBbAkor2_EAdkE.mft (raw, json) Hash identifier: Xqlf11FAhkFJ9jyMlGS+9FsY6inc9gJlBLk4gU9AL7E= Subject key identifier: D0:D3:CB:32:79:48:FA:3A:45:36:D8:3C:AB:68:B4:CC:3B:FA:DF:26 Authority key identifier: 8F:AA:9B:D9:DA:F6:74:4D:C9:9D:00:5B:02:4A:2B:DB:F1:00:76:41 Certificate issuer: /CN=A9113BB0/serialNumber=8FAA9BD9DAF6744DC99D005B024A2BDBF1007641 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6qb2dr2dE3JnQBbAkor2_EAdkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft Manifest number: 08 Signing time: Sat 31 May 2025 07:42:32 +0000 Manifest this update: Sat 31 May 2025 07:42:31 +0000 Manifest next update: Sat 07 Jun 2025 07:42:31 +0000 Files and hashes: 1: j6qb2dr2dE3JnQBbAkor2_EAdkE.crl (hash: eJq0CReysAv3JRAKqz46f3p3P4oKy8NKOUYPs4+O31Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.crl rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6qb2dr2dE3JnQBbAkor2_EAdkE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BB0, serialNumber=8FAA9BD9DAF6744DC99D005B024A2BDBF1007641 Validity Not Before: May 31 07:42:31 2025 GMT Not After : Jun 7 07:42:31 2025 GMT Subject: CN=683ab2e7-d90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7a:2f:45:fe:e4:54:c2:a6:62:66:4d:83:3b: 91:73:9c:da:77:3b:97:f4:c8:1e:f1:9a:66:c4:67: d6:19:11:47:71:7a:ac:2a:a4:04:62:eb:98:4e:31: 09:d2:e0:18:c0:8b:2f:a6:d7:dc:11:4a:22:12:85: 17:fb:d7:db:36:82:6c:76:3b:68:e1:44:b3:ff:8a: c0:4d:41:c7:0e:d3:81:9b:f7:50:a4:23:00:db:4f: 2c:28:ef:bd:c2:ee:cd:c9:d9:77:42:a0:25:39:d2: 3c:f1:f9:6b:c8:fb:7b:fa:07:61:14:87:57:4a:2b: 9c:2b:bb:ee:df:8a:7d:22:60:94:cc:f4:e1:93:3a: 1b:c2:cd:83:e1:1f:d6:12:ad:92:69:dc:a8:9d:53: b1:45:e7:be:cc:cd:fd:7e:03:fe:af:68:97:52:5d: 9e:14:72:1c:58:28:8d:97:75:d1:6a:78:ce:f2:8e: 86:1d:18:5d:91:d3:ca:f8:88:89:e9:68:e4:73:62: 80:41:58:45:22:92:62:9e:63:7f:14:94:32:9f:e7: 44:58:3c:3b:a6:9a:d7:45:c4:3c:6c:6c:65:40:45: 5a:d7:2d:b2:1c:86:07:c9:b8:64:4d:45:47:34:9a: fd:88:3e:e9:a0:2c:48:91:14:50:c6:5e:06:b5:cc: f3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D3:CB:32:79:48:FA:3A:45:36:D8:3C:AB:68:B4:CC:3B:FA:DF:26 X509v3 Authority Key Identifier: keyid:8F:AA:9B:D9:DA:F6:74:4D:C9:9D:00:5B:02:4A:2B:DB:F1:00:76:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6qb2dr2dE3JnQBbAkor2_EAdkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:87:ca:ee:c7:3d:61:bc:55:cb:fc:18:40:8c:77:b5:96:a6: ed:7d:28:7e:f3:bc:21:9b:f6:10:0b:fa:41:ca:f3:eb:13:61: f7:b2:ba:1e:1a:17:d7:96:84:a4:cd:fd:bc:55:78:e7:9b:26: c7:84:f5:3a:e5:97:04:32:19:20:50:ca:56:f9:94:9e:63:f7: 14:00:7a:39:0a:6d:25:95:15:76:33:28:39:e4:89:04:91:5b: ad:c9:e0:0a:de:f5:d0:9c:d2:53:7f:cc:1e:fd:b1:f8:d5:9a: f4:ff:13:3b:54:31:1f:a0:47:92:6a:ff:ea:b1:50:d0:be:64: c0:fe:65:07:63:b4:04:86:83:71:2b:df:67:71:55:ee:f0:ce: 6f:03:81:51:d8:c7:30:12:3a:cf:a7:d5:53:12:88:ec:57:91: 8c:95:32:8f:32:ce:ee:e4:e2:06:36:a2:41:28:9f:58:a0:42: 50:b3:6c:74:b1:d1:43:41:a8:c1:55:6e:bb:c0:66:6e:9a:e6: 70:c6:06:a0:34:1f:0e:64:be:8b:c8:c0:2e:ba:42:bf:8d:3e: a3:46:16:80:7c:48:fc:a3:a8:92:b2:fc:3d:18:17:65:77:cb: 6a:66:51:f5:b2:9f:cc:6c:a4:f6:ab:ca:2c:96:cd:93:59:04: 61:82:c8:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0JCMDExMC8GA1UEBRMoOEZBQTlCRDlEQUY2NzQ0REM5OUQwMDVCMDI0QTJCREJG MTAwNzY0MTAeFw0yNTA1MzEwNzQyMzFaFw0yNTA2MDcwNzQyMzFaMBgxFjAUBgNV BAMTDTY4M2FiMmU3LWQ5MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrei9F/uRUwqZiZk2DO5FznNp3O5f0yB7xmmbEZ9YZEUdxeqwqpARi65hOMQnS 4BjAiy+m19wRSiIShRf719s2gmx2O2jhRLP/isBNQccO04Gb91CkIwDbTywo773C 7s3J2XdCoCU50jzx+WvI+3v6B2EUh1dKK5wru+7fin0iYJTM9OGTOhvCzYPhH9YS rZJp3KidU7FF577Mzf1+A/6vaJdSXZ4UchxYKI2XddFqeM7yjoYdGF2R08r4iInp aORzYoBBWEUikmKeY38UlDKf50RYPDummtdFxDxsbGVARVrXLbIchgfJuGRNRUc0 mv2IPumgLEiRFFDGXga1zPNHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0NPLMnlI +jpFNtg8q2i0zDv63yYwHwYDVR0jBBgwFoAUj6qb2dr2dE3JnQBbAkor2/EAdkEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQkIwL0E4ODYxNUVFMzIz QTExRjBCRjlFMUQzNkM0RjlBRTAyL2o2cWIyZHIyZEUzSm5RQmJBa29yMl9FQWRr RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvajZxYjJkcjJkRTNKblFCYkFrb3IyX0VBZGtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QkIwL0E4ODYxNUVFMzIzQTExRjBCRjlFMUQzNkM0RjlBRTAyL2o2cWIyZHIyZEUz Sm5RQmJBa29yMl9FQWRrRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM6Hyu7HPWG8Vcv8GECMd7WWpu19KH7zvCGb9hAL+kHK8+sTYfeyuh4a F9eWhKTN/bxVeOebJseE9TrllwQyGSBQylb5lJ5j9xQAejkKbSWVFXYzKDnkiQSR W63J4Are9dCc0lN/zB79sfjVmvT/EztUMR+gR5Jq/+qxUNC+ZMD+ZQdjtASGg3Er 32dxVe7wzm8DgVHYxzASOs+n1VMSiOxXkYyVMo8yzu7k4gY2okEon1igQlCzbHSx 0UNBqMFVbrvAZm6a5nDGBqA0Hw5kvovIwC66Qr+NPqNGFoB8SPyjqJKy/D0YF2V3 y2pmUfWyn8xspParyiyWzZNZBGGCyNM= -----END CERTIFICATE-----Generated at Sat May 31 15:47:01 2025 by rpki-client